Apple macOS and Safari Passwords Extension Authentication Bypass Vulnerability

A vulnerability exists in macOS Sequoia and Safari that allows a malicious application to bypass authentication for browser extensions. This issue arises from inadequate data redaction in system logging, which could potentially be exploited to manipulate or deceive extension authentication processes.

Impact

Exploitation of this vulnerability could lead to unauthorized bypassing of authentication mechanisms for browser extensions, allowing malicious apps to interact with extensions inappropriately or gain elevated privileges through such interactions.

Remediation

Users can update to macOS Sequoia 15.3 or Safari 18.3 to address this vulnerability.